dsh-confirm-gate
Bounded-run confirmation gate and per-turn operation counter for DeepSeek Harness under full permissions.
Install
$ dsh plugin --profile <desktop|web> add file:<plugin-dir>Plugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Per-turn persistent-operation counting across tools and commands
- Tiered intervention: warning reminders, explicit stop directives, and user confirmation escalation
- Turn-level release mechanism activated by customizable confirmation keywords
- Intelligent command-level inspection filtering read-only PowerShell commands from persistent operations
- Integration via DeepSeek Harness lifecycle hooks including pre-execute, post-execute, and pre-step
Useful For
- Preventing unbounded token spend and continuous trial-and-error edits when running in danger-full-access mode
- Enforcing deliberate pause points before the model executes multiple system-modifying actions
- Allowing unrestricted read, grep, and inspection actions while gating writes and dispatches
Who It Fits
- DeepSeek Harness users operating outside sandboxed environments on Windows or desktop hosts
- Developers seeking automated budget caps and course-correction guards for autonomous agents
- Teams requiring human-in-the-loop oversight during automated terminal and workspace workflows
Documented Limitations
- Does not serve as a cryptographic security or sandbox isolation boundary against adversarial agents
- Subagent internal operations are not counted independently and roll into the main agent count
- Command-level filtering relies on name matching rather than an AST parser, biasing towards marking uncertain commands as persistent
- Auto-disable behavior under read-only or workspace-write sandboxes is implemented but untested on physical environments
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- SteelUnion/dsh-confirm-gate
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- dc0d6fa · 2026-10-17
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-17
- Last release
- 2026-10-17
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Pre-execution safety net blocking destructive shell commands and secret leaks in coding agents.
View plugin →Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed security.
View plugin →Session lifecycle manager for DeepSeek Harness with search, restore, idle cleanup, and diagnosis.
View plugin →